Skip to main content

Overview

ASIL determination is the automatic result of combining your Severity, Exposure, and Controllability assessments. The HARA Risksheet applies the ISO 26262-3 Table D.5 risk matrix formula to compute the ASIL rating (QM, A, B, C, or D) for each hazard.

Steps

1. Complete S-E-C Assessment

Before ASIL values can appear, ensure each hazard has all three risk parameters assigned:
  • Severity (S0-S3) — Potential harm level
  • Exposure (E0-E4) — Frequency of operational situation
  • Controllability (C0-C3) — Driver’s ability to prevent harm
The ASIL column will show Pending until all three values are set.

2. Switch to HARA Classification View

In the HARA Risksheet, select the ** HARA Classification** workflow view from the view dropdown. This focuses the display on the risk assessment columns:
ColumnPurpose
Severity (S)S0-S3 rating
Exposure (E)E0-E4 rating
Controllability (C)C0-C3 rating
ASILAuto-calculated QM/A/B/C/D

3. Review Auto-Calculated ASIL Values

The Risksheet formula automatically computes ASIL using the ISO 26262-3 risk matrix: diagram Example: Hazard “Failure to detect obstacle” with S3 + E4 + C3ASIL D

4. Check ASIL Color-Coding

The Risksheet applies color-coded cell decorators to ASIL values for visual risk prioritization:
ASILColorSafety Integrity Requirement
QMGrayQuality Management only
AGreenLow functional safety rigor
BOrangeModerate safety requirements
CLight RedHigh safety rigor
DPurpleMaximum safety integrity

5. Validate ASIL Distribution

Click the ** Full View** to see all hazards with their ASIL ratings. Verify the distribution makes sense:
  • Most automotive projects: 40-60% QM/A, 30-40% B/C, 5-15% D
  • Safety-critical systems (AEB, steering, braking): expect more ASIL C/D
  • If all hazards are ASIL D, review your S-E-C assessments — you may be over-rating
If ASIL cells remain blank after setting S-E-C values:
  • Check that Severity/Exposure/Controllability use the correct enum IDs (s0-s3, e0-e4, c0-c3)
  • Verify the Risksheet formula is enabled (column type must be formula, not text)
  • Clear browser cache and reload the Risksheet
  • Check .polarion/nextedy/sheet-configurations/ for formula syntax errors

6. Document ASIL Rationale

For each ASIL C or D hazard, add justification in the Hazard Description or Operational Situation column explaining:
  • Why the combination of S-E-C leads to this severity level
  • Real-world scenarios that drive the Exposure rating
  • Driver limitations that affect Controllability
This rationale is required for ISO 26262-3 clause 7 compliance audits.

Verification

You should now see:
  • ✅ All hazards display an ASIL value (QM, A, B, C, or D) with color-coding
  • ✅ No “Pending” ASIL cells (all S-E-C assessments complete)
  • ✅ ASIL distribution follows expected project risk profile
  • ✅ High-ASIL hazards (C/D) have documented rationale

What Happens Next

ASIL values propagate downstream to Safety Goals:
  1. Each hazard’s ASIL automatically flows to its linked Safety Goal via the inheritASIL formula
  2. Safety Goals carry the ASIL rating to Functional Safety Requirements (ISO 26262-4)
  3. Design Requirements inherit ASIL from parent Safety Requirements
  4. Verification testing scope is determined by ASIL level (e.g., ASIL D requires independent assessment)

See Also